Skip to content

Add ReleaseRun CLI to OSS and Dependency management#89

Open
Matheus-RR wants to merge 1 commit intosottlmarek:masterfrom
Matheus-RR:add-releaserun-oss-v2
Open

Add ReleaseRun CLI to OSS and Dependency management#89
Matheus-RR wants to merge 1 commit intosottlmarek:masterfrom
Matheus-RR:add-releaserun-oss-v2

Conversation

@Matheus-RR
Copy link

Description

Adds ReleaseRun to the OSS and Dependency management section — a CLI tool and GitHub Action that scans dependency files for EOL dates, CVE risk, and health grades.

What it does (distinct from existing tools in this section):

  • Checks package.json, requirements.txt, Cargo.toml, go.mod, composer.json, package-lock.json etc.
  • Reports EOL status (end-of-life date proximity) in addition to CVEs — filling the gap between CVE scanners and version managers
  • Returns letter grades (A–F) with severity-weighted scoring
  • GitHub Action available for CI integration: Releaserun/releaserun-action@v1

Ecosystems covered: Node.js, Python, Go, Rust, Ruby, PHP, and more

Links:

Checklist

  • Only README.md is modified
  • Single tool addition
  • Entry follows existing table format
  • GitHub repo link used (not marketing page)

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant